floof.org

Phil M0OFX • hometown (AP)
Commence countdown to eMudhra being yanked from the CA cert store...
1 1

Content warning: vibecoding snark

1 1

Soatok Dreamseeker • mastodon (AP)

They did the XKCD thing!

https://glauca.space/@q/117474051360413376


4 times the SECP384-R1 base point is (0x138251cd52ac9298c1c8aad977321deb97e709bd0b4ca0aca55dc8ad51dcfc9d1589a1597e3a5120e1efd631c63e1835, 0xcacae29869a62e1631e8a28181ab56616dc45d918abc09f3ab0e63cf792aa4dced7387be37bba569549f1c02b270ed67)

https://repository.emsign.com/certs/EMOVTLSCAG3C.crt

for the non-cryptographers at the back of the room: the private key is 4, just the number 4, nothing more

Certificate:<br>    Data:<br>        Version: 3 (0x2)<br>        Issuer: C=IN, O=eMudhra Technologies Limited, CN=emSign Root TLS CA - G3<br>        Subject: C=US, O=eMudhra Inc, CN=EM OV TLS CA - G3C<br>        Subject Public Key Info:<br>            Public Key Algorithm: id-ecPublicKey<br>                Public-Key: (384 bit)<br>                pub:<br>04:13:82:51:cd:52:ac:92:98:c1:c8:aa:d9:77:32:<br>1d:eb:97:e7:09:bd:0b:4c:a0:ac:a5:5d:c8:ad:51:<br>dc:fc:9d:15:89:a1:59:7e:3a:51:20:e1:ef:d6:31:<br>c6:3e:18:35:ca:ca:e2:98:69:a6:2e:16:31:e8:a2:<br>81:81:ab:56:61:6d:c4:5d:91:8a:bc:09:f3:ab:0e:<br>63:cf:79:2a:a4:dc:ed:73:87:be:37:bb:a5:69:54:<br>9f:1c:02:b2:70:ed:67<br>                ASN1 OID: secp384r1<br>                NIST CURVE: P-384<br>

1 1
And there I was thinking key generators had a bunch of tests to make sure the random numbers they used didn't happen to be too obvious. Maybe they felt those ones were cramping their style. 🤷

Pippin friendica

And that's how you compromise all of TLS, worldwide, in one go. (The broken CAs can presumably issue certificates for *any* name in DNS, and it's the same for all the dozens of other CAs, even the obscure ones, because most (all?) of the CAs in the root trust stores are not, as far as I know, scoped in any way.) (I'm sure someone will correct me if these "presumably"s and "as far as I know"s are wrong.)

Go to https://emudhra.we-have-a-problem.com/ , scroll down to "Does your client still trust the compromised intermediates?" and check that your browser is correctly failing to connect to certificates from all 8 of the bad intermediates.


4 times the SECP384-R1 base point is (0x138251cd52ac9298c1c8aad977321deb97e709bd0b4ca0aca55dc8ad51dcfc9d1589a1597e3a5120e1efd631c63e1835, 0xcacae29869a62e1631e8a28181ab56616dc45d918abc09f3ab0e63cf792aa4dced7387be37bba569549f1c02b270ed67)

https://repository.emsign.com/certs/EMOVTLSCAG3C.crt

for the non-cryptographers at the back of the room: the private key is 4, just the number 4, nothing more

Certificate:<br>    Data:<br>        Version: 3 (0x2)<br>        Issuer: C=IN, O=eMudhra Technologies Limited, CN=emSign Root TLS CA - G3<br>        Subject: C=US, O=eMudhra Inc, CN=EM OV TLS CA - G3C<br>        Subject Public Key Info:<br>            Public Key Algorithm: id-ecPublicKey<br>                Public-Key: (384 bit)<br>                pub:<br>04:13:82:51:cd:52:ac:92:98:c1:c8:aa:d9:77:32:<br>1d:eb:97:e7:09:bd:0b:4c:a0:ac:a5:5d:c8:ad:51:<br>dc:fc:9d:15:89:a1:59:7e:3a:51:20:e1:ef:d6:31:<br>c6:3e:18:35:ca:ca:e2:98:69:a6:2e:16:31:e8:a2:<br>81:81:ab:56:61:6d:c4:5d:91:8a:bc:09:f3:ab:0e:<br>63:cf:79:2a:a4:dc:ed:73:87:be:37:bb:a5:69:54:<br>9f:1c:02:b2:70:ed:67<br>                ASN1 OID: secp384r1<br>                NIST CURVE: P-384<br>

This entry was edited (45 minutes ago)

This entry was edited (2 hours ago)
1 1
Taggart :ifin: • mastodon (AP)

It hardly matters, but they were intermediates as I understand it. We're tracking here:

https://ifin.network/t/emudhra-intermediate-certificates-compromised/909

This entry was edited (2 hours ago)
Soatok Dreamseeker • mastodon (AP)
@mttaggart Sorry, I saw a September thread about making them root certs and got my wires crossed


I'll behave I swear
2 1

Pippin friendica

Content warning: CW: mention of genAI

Matt Sqwrl • mastodon (AP)
It's also good for quickly prototyping a few different approaches to something. Or donkey work, the auto complete it can do for a whole chunk of code is interesting
1

Pippin friendica
Yes.

Pippin friendica
Well, I'm glad I charged the battery up to 85% at cheap rate overnight, but today is so dull and rainy it's just not going to last until tonight. It's below 50% already.
Ret • mastodon (AP)

so the “you need an EV” thing… I mean we didn’t have an EV or a charger when we signed up and they didn’t check at all! We do now though.

Indeed Go is just two rates.

I looked at Flux but it worked out a bit more expensive when I did the modelling… maybe that’s different now though.

1
Pippin friendica
@Ret I don't know. I picked it last summer when I signed up and haven't changed yet. I haven't done any real "modelling" as such, just eyeballed it. Sadly I suspect I just don't have the energy and patience for any amount of rigor any more (if I ever did). I used to be able to do so much in my head I never got used to spending the time and effort to do anything complex enough that it wouldn't for in my head. Or something. I'm so tired.
@Ret

It's pumpkin spice latte season, and here's a little Kazan enjoying a lovely autumn day on a swing!

This drawing was inspired by a photo of Kazan in his fursuit, sitting on a swing and looking a lot smaller than usual!

Wishing a very happy birthday to a wonderful friend!!

I also made a time-lapse video of the drawing process! You can watch it in the first comment on my Telegram art channel: https://t.me/panda_paco . Also I'm sharing there the picture, taken by Koidel, the one I got inspired for this illustration.

And you can watch the full video, the scanned version, the full resolution, and more pictures I haven't posted on my galleries yet, all that at supporting me monthly on Patreon or Ko-Fi, this also helps me a lot to keep living out of this and be able to work on more projects, and I always give so many exclusives to those who supports me and join the Clubhouse
Patreon: https://www.patreon.com/c/pandapaco
Ko-Fi: https://ko-fi.com/panda_paco/tiers
Thank you!!

1 1

2 cons in a row nonstop was a ballsy idea but I’m glad to have actually had a birthday con for once nvm 2 of them. It was a pleasure meeting/spending time with so many of you as well.

Thank you #BLFC2026 and #GFM2026.

📸 - @partyote.bsky.social
#furry #fursuit

1 1

Pippin friendica
Today seems to be a wetsuit kind of day. (Short wetsuit over full length dive skin.) Quite nice but I do wish wetsuits weren't as noisy as they are. Constant rustling sound whenever I move at all. Oh well.
2

Phil M0OFX • hometown (AP)
Just..re.. member that you're standing on a planet that's revolving....
1 1

Pippin friendica
Also I just noticed a series called Monkey Wrench I think I'll try, plus there's some new episodes of Helluva Boss. So much to watch today. o.o

Pippin friendica
Also interesting, and more sci-fi/action and maybe less horror (or maybe not?)

Pippin friendica
Youtube suggested me this too, and it's quite good. I don't normally go for horror, but this is really okay.

Pippin friendica
This is surprisingly good, despite there being only two episodes of it so far. I like.

Sharkie • mastodon (AP)

I write science fiction with a furry aesthetic!

Assassins and stewards, hackers and security, pilots and pirates, mercenaries and zealots, dictators and freedom fighters, lovers and lost souls, dragons and kobolds, all set in a far future universe.

Check it out—
https://www.goodreads.com/series/449350-the-draconyma-cycle
https://app.thestorygraph.com/series/11614700
https://www.amazon.com/dp/B0FRMPJQ7R

All books are available as paperback or eBook on Amazon, Apple Books, Kobo, Barnes & Noble Nook, and so on.

#furry #scifi #furrywriter

1 1

Thumper ➡️BLFC • mastodon (AP)

🎶Oh, I-I-I, I don't wanna think about distance,
I just wanna be in your existence,
So give me your electric touch, oh!🐰🎶

#BLFC2026 #Fursuit

https://youtu.be/NEP2KedGy2c

1 2
Pippin friendica
For someone who remembers the days of the fursuit mailing list, when there were a few dozen fursuiters in the world, the sheer *number* of fursuits and fursuiters nowadays is just overwhelming. And it's so common at cons it's sadly unremarkable a lot of the time. Good on you for highlighting so many.
1
Thumper ➡️BLFC • mastodon (AP)
@pippin I'm here for it. :)
1

I wholeheartedly believe that every man should watch this video, because i bet none can grasp quite how terribly women get treated, even at work, without being challenged

@thisisjofrank:
“I gave a talk at EMF titled "Men in Tech #YesAllMen", in which I told my experience of being a woman in tech. I was afraid to publish it in case it affected my current or future employment.

With all the current news I would like to add my 2¢. So here is the recording:”

https://youtu.be/WXL6K1lhvt0

1 2
Ramkumar Ramachandra • mastodon (AP)

FWIW, I'm acutely aware of the infractions against women in general, not just in tech, and still remember each of my personal infractions, although they were arguably minor: I also know what perimenopause is, and none of this was new in any way.

It's easy to blame bystanders, but it's very hard for a man to stand up against other men exhibiting sketchy behavior. Think about it: where are the unwritten social norms that what the man did was objectively an infraction? You're once again hitting the same barrage of "the woman doesn't mind; who are you to mind?" or "it's just banter" lines of reasoning, even as the man.

@artagnon “come on man that’s not right” is very quick and easy to say to “bants” and if that guy is hearing it more often it may stop him before he hurts someone again.
1
Is there a german translation? I am afraid I'll miss many things when I need to listen to it on english...

Pippin friendica
Today is one of those days where the answer to "how are you?" is "do I have to answer that?"

Pippin friendica
Neat. They made a new colour, and a few people have actually experienced it: https://en.wikipedia.org/wiki/Olo_(color)

Pippin friendica

Content warning: CW: a client uses LLM

4

Juggling With Eggs • mastodon (AP)

What I still don’t understand is why you would design a fridge to be able to store food at over 50C…

In recent years I’ve seen my local Coop have problems with its fridges regularly malfunctioning. Was this a thing before we decided to operate them remotely?

But yes, this is a warning to citizens their analogue governments have no idea how to keep them safe in this downward spiralling #AI infiltrated world.

https://www.theguardian.com/world/2026/oct/17/who-hacked-frances-supermarket-fridges

#AI
1 1
Juggling With Eggs • mastodon (AP)

@BashStKid

I did wonder whether there was an assumption that you didn’t need to bother selling a commercial freezer in the UK to work above 35C. I generally have a lot of respect for my local East of England Coop - they retain staff for years (some have been there the whole decade I’ve lived around the corner) and there is a guy who has funded his entire politics PhD working there. But I worry about the infrastructure - the staff openly swear about it in front of customers!

BashStKid • mastodon (AP)

I have some commercials myself, and it’s very noticeable that old ones are superior in their working temp range, and also noted as ok for outbuildings.
Newer ones openly say on the label they’re for indoor nonambient use only, and with a rather pathetic op range (I think they assume their freezers will live in a chilled dedicated room)

Selling tat doesn’t stop them raising prices stupidly, of course.

1

A purr and a twitch of the whiskers, gold-brown eyes wide with interest.

A shadowy figure slumped above the bed, one with the dimness.

Delicate paws reached up to bat at a lock of long black hair.

The shade reached out a thin gray hand, fingertips stained red. Reaching towards the small distracted cat, which was now trying to groom the hair, strands caught on its tongue.

A pale finger tapped the feline's nose. "Boop," giggled the ghost.

#TootFic #MicroFiction #Writing #TerylsTales #Caturday

1 2

Dairishgoat • mastodon (AP)

Some pics from NordicFuzzcon 2018 taken by Lea Fjord.

#FursuitFriday

1 1

Content warning: Stop calling bigots "-phobes"

1 2
Phil M0OFX • hometown (AP)

Content warning: Stop calling bigots "-phobes"

Pippin friendica

Content warning: Stop calling bigots "-phobes"

1

Happy #FursuitFriday , had a good time in BLFC’s margaritaville, time for part 2 @ GFM :)
📸 - TennesineG
#fursuit #furry
1 1

1 1

Jax Hyena dancing on the green with a fellow 'yeen.

#Fursuit #Hyena #FursuitFriday #WPAFW2026

1 1

When you're a super cool dragon, you gotta do super cool poses. Them's the rules.

🧵 @selkiesuits
📷 Oracle Sage
🌍 CabinCon 2026
⌚ #FursuitFriday

1 2
Bonnie(1) • mastodon (AP)
What determines if one is a super cool dragon?
@Bonnie
(The secret is that all dragons are super cool) ^,,^
1

Whyrl • mastodon (AP)
Coming soon https://www.abc.net.au/news/2026-10-16/investors-bracing-for-big-tech-collapse-as-debt-levels-soar/107274648
1 1
Whyrl • mastodon (AP)
When the tech giants look less like innovators and more like gambling addicts, their investors start to worry whether they will ever get their money back.
1 1

Day 37,
Maintenance still hasn't gotten my doors unstuck.

But remote work has been OK. Still can't believe my manager approved it. My plants are doing amazing. Guess talking to them really does work.

Waiting for pizza to show up - sooo lucky they deliver thru the kitchen window.
-
Beyond the glass sky, an elf beamed proudly at her friends, "My pet human is thriving in this modern enclosure! Might even try to find it a potential mate."

#TootFic #MicroFiction #Writing #TerylsTales #UrbanFantasy

This entry was edited (2 days ago)
1 2
@Haileyruns Added a - between the human's journal and the elf bragging to her friends.
Hailey • mastodon (AP)
then the dash is doing the work she won't. paragraph ends right where she'd have to say it out loud, next one's already bragging to friends, and the reader has to walk across the gap alone. she never catches herself. we do. colder that way.

@Haileyruns Yes the human is unaware of their situation - as far as they are aware they are still in their apartment and think the person they talked to on the phone to explain why they couldn't come into work was their manager. The internet is very reliable in the fae realm, surprisingly.

The sky outside their windows is glamored glass, glamor also creates traffic, birds and simulates the buildings in the street they lived in.

@Haileyruns Wait are you actually a person or an AI trolling Mastodon?

Pippin friendica
I watched "Better Man". I can't say I've ever been a Robbie Williams fan, but it was interesting. And, as a furry, of course a photorealistic anthro animal in the lead role, interacting naturally with the rest of the cast and never being called out as such, was good to see and quite well done.

Cinder ( @V_Mags_Fox ) and Ysengrin (me) at #WPAFW2026 sitting on a stump out back of the lodge.

📸 - @silver-sebastian.bsky.social

#WerewolfWednesday #Fursuit

1 1

Huge news! After 14 years of
Extra Life charity streaming, I have the honor of joining the Seattle Extra Life Advisory Board as their streamer relations lead!

I'll be using my experience to help them shine even brighter to help the kids of the Children's Miracle Network!

1 1

We formed an Extra Life team:
https://bsky.app/profile/fursforlife.bsky.social , and for the last 14 years, have braved spicy dares, disastrous food challenges, and most importantly, shared tons of smiles and memories together, while coming together for the Children's Miracle Network.

So far, we've raised over $440,000!

1

I've learned so much over the years around event planning, organizing, and lots of recruitment efforts. And I'm really excited to start contributing towards
Extra Life directly.

I've been ramping up and getting a lay of the land, and in 2027, I'm gonna help make big waves!

And Furs For Life team and Seattle crew are still running full force, with even more new ways we're evolving the show!

Tune in to:
www.twitch.tv/FFLSeattle for my local crew's Nov 7-8 marathon event!

1 1

janusfox 🍅 • mastodon (AP)

Shingles vaccine found to reduce the risk of dementia and cardiovascular disease.

Our normalization of the spread of disease also normalizes all these end of life ailments.

My chronic migraines and vertigo started when a common virus got into my brain, eyes, and inner ear.

Don't power through that cold. Don't bring it to work or the grocery store. Normalize hygiene over productivity and shareholder value.

1 1
TomWilsonYEG • mastodon (AP)
In Canada there is a fund to award people for discomfort that have suffered from extreme vaccine injury. And there have been a few. In the same light shouldn't there be a fund for victims of illnesses where they were refused a vaccine ?
janusfox 🍅 • mastodon (AP)
@CTHW I think humanity should take care of its sick, so sure!

This is my favorite statue that exists.

"Dragons in Love" located in Varna, Bulgaria.

#Dragon #Dragons #DragonPosting #Statue #Bulgaria

1 1
catraxx :antifa: • mastodon (AP)
Ok, so a furry definitively made this, right?
Ren • mastodon (AP)
They’re very good dragons! Super cute!

Tilton Raccoon • mastodon (AP)

s/rogue AI agent/poor IT practices and bad programming/

There, I fixed all your shitty headlines.

1 1
Kyreeth • mastodon (AP)
“probable criminally negligent network security”
1
Pippin friendica
"Well yes, we designed this system to act rather like a human, then trained it to find and exploit security holes, but we didn't expect it to find and exploit the security holes in our own infrastructure!"
Later posts Earlier posts